Montana State Auditor and Commissioner of Securities and Insurance James Brown announced an immediate investigation into Blue Cross Blue Shield of Montana (BCBSMT) following a major data breach that may have compromised the personal and medical information of up to 462,000 Montanans.
“This breach is not just a technical lapse. This is a deeply disturbing incident with far-reaching and jaw-dropping consequences for our citizens,” Commissioner Brown said. “Montanans have every right to expect their personal data, especially sensitive health information, to be protected by the entities they trust. The severity of this breach underscores the urgent need for robust oversight and our agency to take swift and immediate action to protect Montana consumers.”
BCBSMT reported that the breach, which occurred between October 21, 2024, and January 13, 2025, may have exposed names, addresses, birth dates, phone numbers, billing details, and medical information. While BCBSMT has stated it will notify affected customers and provide credit monitoring, Commissioner Brown indicated that these measures have not yet been confirmed.
“My first and foremost duty is to protect the people of Montana. Any time a company’s actions become a threat to our citizens, my office will stand in their way and carry out every regulatory authority we possess to safeguard Montana families,” Brown said. “We will never hesitate to hold bad actors accountable and ensure consumer trust remains unshaken.”
In addition to the investigation, Brown announced new cybersecurity initiatives and a statewide public awareness campaign aimed at helping Montanans protect themselves against identity theft and fraud stemming from such incidents.
Affected customers are advised to carefully review Explanation of Benefits (EOB) statements, monitor their accounts for suspicious activity, and report any irregularities immediately. Resources and guidance are available through the Montana Commissioner of Securities and Insurance website or BCBSMT’s dedicated member support line.
This investigation highlights growing concerns over the security of personal health information and the responsibility of insurers to protect sensitive data in an increasingly digital landscape.